akira
First seen April 26, 2023Active1,602 claimed victims
The claims below are reproduced as posted by akira on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. It's worth noting that with the end of CONTI's operation, several affiliates migrated to independent campaigns such as Royal, BlackBasta, and others. According to some reports, Akira affiliates also work with other ransomware operations, such as Snatch and BlackByte, as an open directory of tools used by an Akira operator was identified, which also had connections to the Snatch ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Furniture Mart USA | November 2, 2024 | ransomware_live | — |
| Dumont Printing | October 28, 2024 | ransomware_live | — |
| Intercomp | October 25, 2024 | ransomware_live | — |
| ECBM | October 25, 2024 | ransomware_live | — |
| Corman Leigh | October 18, 2024 | ransomware_live | — |
| Automation Tool & Die | October 17, 2024 | ransomware_live | — |
| Ilvief | October 17, 2024 | ransomware_live | — |
| CAUDURO SPORTS LTDA | October 17, 2024 | ransomware_live | — |
| Coffee Beanery | October 16, 2024 | ransomware_live | — |
| North American Breaker | October 4, 2024 | ransomware_live | — |
| TANYA Creations | October 4, 2024 | ransomware_live | — |
| Riley Gear Corporation | October 4, 2024 | ransomware_live | — |
| Jamaica Bearings Group | October 4, 2024 | ransomware_live | — |
| Rob Levine & Associates (roblevine.com) | October 3, 2024 | ransomware_live | — |
| Complete Control (complete-control.com) | October 3, 2024 | ransomware_live | — |
| Holmes & Brakel | October 2, 2024 | ransomware_live | — |
| ETC Companies | October 2, 2024 | ransomware_live | — |
| CSG Consultants | October 1, 2024 | ransomware_live | — |
| ShoreMaster | October 1, 2024 | ransomware_live | — |
| Cascade Columbia Distribution | October 1, 2024 | ransomware_live | — |
| Deutsche Industrie Video System | September 30, 2024 | ransomware_live | — |
| Deutsche Industrie VideoSystem | September 30, 2024 | ransomware_live | — |
| Schäfer, dein BäckerGmbH & Co. KG | September 26, 2024 | ransomware_live | — |
| ATG Communications Group | September 25, 2024 | ransomware_live | — |
| Lawrie Insurance Group | September 25, 2024 | ransomware_live | — |
| Concord Management Services | September 25, 2024 | ransomware_live | — |
| Dfa Ny | September 25, 2024 | ransomware_live | — |
| Turf Paradise | September 24, 2024 | ransomware_live | — |
| Idre Fjäll | September 23, 2024 | ransomware_live | — |
| Brown Bottling Group | September 23, 2024 | ransomware_live | — |
| Avi Resort & Casino | September 23, 2024 | ransomware_live | — |
| Hillandale Farms | September 19, 2024 | ransomware_live | — |
| Rengo Packaging | September 14, 2024 | ransomware_live | — |
| AACANet | September 11, 2024 | ransomware_live | — |
| Vickers Engineering | September 10, 2024 | ransomware_live | — |
| Colwell Colour (colwellcolour.com) | September 6, 2024 | ransomware_live | — |
| Cellular Plus | September 5, 2024 | ransomware_live | — |
| SWISS CZ | September 5, 2024 | ransomware_live | — |
| Imetame | September 5, 2024 | ransomware_live | — |
| Baird Mandalas Brockstedt LLC | September 5, 2024 | ransomware_live | — |
| Maxus Group | September 2, 2024 | ransomware_live | — |
| 4QuartersIT | August 31, 2024 | ransomware_live | — |
| Guard1 | August 30, 2024 | ransomware_live | — |
| Allegheny Millwork & Lumber | August 29, 2024 | ransomware_live | — |
| MONVIA Holding, a.s. | August 29, 2024 | ransomware_live | — |
| Bulbrite Industries | August 25, 2024 | ransomware_live | — |
| Monster Electrical | August 23, 2024 | ransomware_live | — |
| Snelling Paper & Sanitation | August 23, 2024 | ransomware_live | — |
| Lucid Corp | August 23, 2024 | ransomware_live | — |
| Falvey LinenSupply | August 22, 2024 | ransomware_live | — |
| Datron WorldCommunications | August 22, 2024 | ransomware_live | — |
| McFarlane, Inc. | August 22, 2024 | ransomware_live | — |
| McFarlane | August 22, 2024 | ransomware_live | — |
| HOERBIGER Holding | August 21, 2024 | ransomware_live | — |
| Jinny Corporation | August 21, 2024 | ransomware_live | — |
| H2OBX Waterpark | August 21, 2024 | ransomware_live | — |
| North Georgia Brick | August 20, 2024 | ransomware_live | — |
| Irr Supply Centers | August 20, 2024 | ransomware_live | — |
| The Transit Authority of Northern Kentucky (TANK) | August 19, 2024 | ransomware_live | — |
| HTT Packaging & Design | August 19, 2024 | ransomware_live | — |
| Ocean BeautySeafoods | August 15, 2024 | ransomware_live | — |
| Boni | August 14, 2024 | ransomware_live | — |
| TRC Worldwide Engineering (Trcww) | August 14, 2024 | ransomware_live | — |
| Yazoo ValleyElectric Power Assosiation | August 9, 2024 | ransomware_live | — |
| Travis Pruitt & Associates | August 2, 2024 | ransomware_live | — |
| Magguilli Law Firm,PPLC | August 2, 2024 | ransomware_live | — |
| Peñoles | August 1, 2024 | ransomware_live | — |
| BRASPRESS | July 31, 2024 | ransomware_live | — |
| Find Great People | July 31, 2024 | ransomware_live | — |
| SAGE Publishing | July 30, 2024 | ransomware_live | — |
| Olschewski Davie | July 30, 2024 | ransomware_live | — |
| Macadam Europe | July 30, 2024 | ransomware_live | — |
| Volo Internet Tech | July 28, 2024 | ransomware_live | — |
| Empereon Constar | July 25, 2024 | ransomware_live | — |
| Environmental Design International | July 25, 2024 | ransomware_live | — |
| El Dorado Stores and Supermarkets | July 25, 2024 | ransomware_live | — |
| CALDAN Conveyor | July 24, 2024 | ransomware_live | — |
| Electroalfa | July 24, 2024 | ransomware_live | — |
| American Acryl | July 24, 2024 | ransomware_live | — |
| SKC West | July 24, 2024 | ransomware_live | — |
| Win Systems | July 23, 2024 | ransomware_live | — |
| Notarkammer Pfalz | July 23, 2024 | ransomware_live | — |
| siParadigm | July 23, 2024 | ransomware_live | — |
| Lotus Concepts Management | July 17, 2024 | ransomware_live | — |
| Sigma | July 11, 2024 | ransomware_live | — |
| Usina Alta Mogiana S/A | July 10, 2024 | ransomware_live | — |
| P448 | July 10, 2024 | ransomware_live | — |
| Heidmar | July 9, 2024 | ransomware_live | — |
| Inland Audio Visual | July 9, 2024 | ransomware_live | — |
| Federated Co-operatives | July 8, 2024 | ransomware_live | — |
| Esedra | July 8, 2024 | ransomware_live | — |
| Allied Industrial Group | July 8, 2024 | ransomware_live | — |
| Alimac | July 3, 2024 | ransomware_live | — |
| Explomin | July 3, 2024 | ransomware_live | — |
| Conexus Medstaff | July 2, 2024 | ransomware_live | — |
| P1 Technologies | July 2, 2024 | ransomware_live | — |
| SYNERGY PEANUT | July 1, 2024 | ransomware_live | — |
| Wilmots (Legal services) | June 28, 2024 | ransomware_live | — |
| Power Lube Industrial | June 28, 2024 | ransomware_live | — |
| Waterbury Newton | June 26, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).